diff --git a/twitter-sentiment-processor/demos/py-demo/viewer/requirements.txt b/twitter-sentiment-processor/demos/py-demo/viewer/requirements.txt
index 883fd905..a36b1795 100644
--- a/twitter-sentiment-processor/demos/py-demo/viewer/requirements.txt
+++ b/twitter-sentiment-processor/demos/py-demo/viewer/requirements.txt
@@ -2,3 +2,4 @@ dapr-ext-grpc >= 1.0.0
 dapr >= 1.0.0
 flask-socketio == 4.*
 flask >= 1.1.2
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability